En resumen
- CVE-2020-1933 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.apache.nifi:nifi, nifi (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.8%, mayor que el 86.5% de las vulnerabilidades.
- Solución: actualizar a 1.11.0 o posterior.
Description
A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.
NVD description
A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.
Más vulnerabilidades de org.apache.nifi:nifi
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free